Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/GmNGDehA5KkUCD4j1s1In8F87qw.roa
File:                     GmNGDehA5KkUCD4j1s1In8F87qw.roa (raw, json)
Hash identifier:          MMZMsgAL1cUBvHsdaey6kVGw4FE5Rlp4urOylKtMkm4=
Subject key identifier:   1A:63:46:0D:E8:40:E4:A9:14:08:3E:23:D6:CD:48:9F:C1:7C:EE:AC
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0270
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/GmNGDehA5KkUCD4j1s1In8F87qw.roa
Signing time:             Mon 20 Feb 2023 08:03:29 +0000
ROA not before:           Mon 20 Feb 2023 08:03:29 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.145/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:03:29 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=1A63460DE840E4A914083E23D6CD489FC17CEEAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:16:24:75:1b:fb:88:08:a7:88:f8:2a:36:73:
                    3e:7f:e0:ac:b2:74:8c:1c:c1:f3:b5:04:5d:33:f2:
                    23:82:41:dd:5c:ad:c9:d9:5c:5c:17:14:53:f0:12:
                    92:a5:05:f3:12:f2:c4:38:ea:4f:a4:96:55:8d:28:
                    30:7a:40:8a:dc:d8:cf:4e:87:34:9f:79:82:34:a1:
                    bb:c0:33:a3:5a:52:95:51:60:df:5e:29:dd:eb:c4:
                    4e:3b:3d:b0:5b:71:7f:af:41:73:c9:0d:e6:20:6e:
                    d5:0c:42:1f:bf:c9:ee:d1:e4:5d:13:92:34:34:bf:
                    72:47:3c:7c:6c:3d:f7:a3:fc:63:16:03:27:14:fa:
                    77:04:99:78:42:07:ee:80:2b:bb:4e:ea:03:ec:cc:
                    8a:79:40:9a:18:ed:93:5a:28:63:38:0e:84:53:10:
                    56:5e:33:1d:58:4a:52:85:e9:5b:61:32:62:d9:95:
                    8d:13:c8:9a:1d:c9:b5:03:2e:37:0e:6b:6b:96:d6:
                    c5:ba:32:7d:19:f1:a9:cd:84:18:18:2c:e9:09:f0:
                    4a:22:93:7d:f8:48:16:ee:1c:6a:79:c4:64:15:5b:
                    ac:ec:c4:85:9d:f0:85:d9:4d:69:21:8f:bb:00:5d:
                    08:02:65:21:5e:b5:16:ef:37:32:b0:2d:e3:51:50:
                    22:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:63:46:0D:E8:40:E4:A9:14:08:3E:23:D6:CD:48:9F:C1:7C:EE:AC
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/GmNGDehA5KkUCD4j1s1In8F87qw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.145/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:3a:79:b3:c9:c4:5b:d9:bc:ed:b0:9d:6e:64:bc:a4:3c:aa:
         2e:4c:b5:f6:44:7b:9f:e7:b9:88:bd:74:e4:42:75:3d:10:24:
         a7:c3:e7:92:19:1b:cd:ad:1a:d3:e0:6f:5d:4b:f8:e9:1d:32:
         56:91:5a:98:09:93:50:93:d9:52:0c:c9:0d:77:a0:bd:2d:6a:
         d2:8f:17:54:c8:1e:1c:6b:25:57:0a:23:03:cb:3b:51:4e:22:
         ea:fd:c2:d9:49:57:3e:c7:f8:bd:b5:16:01:75:b9:7c:08:4f:
         d5:7c:b9:28:06:e9:da:e7:b0:d4:d3:70:19:60:39:72:66:a7:
         78:2d:cb:91:ed:dc:78:85:77:f7:cc:8b:24:ae:b5:6a:73:d1:
         64:1f:d6:81:42:d3:74:a8:96:f5:de:06:10:33:77:b8:06:8e:
         18:3c:ae:61:1d:76:49:d3:a5:ed:6e:04:69:5e:a2:b5:69:d3:
         e0:6e:a9:8d:4c:5b:14:a8:fe:4f:b3:82:f1:33:c7:27:98:d2:
         56:16:07:c7:92:b5:39:a5:30:4e:85:5c:ea:56:71:2f:45:55:
         73:ce:c5:15:c9:d4:7f:e7:47:1a:80:b2:67:1b:79:7f:74:b3:
         36:90:57:37:d2:b3:0e:19:42:53:11:4b:d6:a6:89:61:eb:14:
         b7:66:dd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:03 2023 by rpki-client on console-fra.rpki-client.org